Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: +TczpZ/HuyxJWz8ao8DT8dVemiT5Bc/p991mrRtN72o=
Subject key identifier: 07:9A:3E:AD:A7:7B:75:3C:1C:DD:78:EF:34:8F:8D:31:58:37:C8:CB
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 0197B74572C15B2012F6CD1A706F0CFDFEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 0691
Signing time: Sat 28 Jun 2025 16:01:11 +0000
Manifest this update: Sat 28 Jun 2025 16:01:11 +0000
Manifest next update: Sun 29 Jun 2025 16:01:11 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: fNntbZvDT/NHHlwwcDShlmTjupahd7gxDmhO+GXB6UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:72:c1:5b:20:12:f6:cd:1a:70:6f:0c:fd:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Jun 28 16:01:11 2025 GMT
Not After : Jun 29 16:01:11 2025 GMT
Subject: CN=079a3eada77b753c1cdd78ef348f8d315837c8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:51:66:5b:e6:c9:fd:ba:c4:ec:fe:a6:c1:
04:15:90:09:d7:10:c0:97:fb:22:10:9a:9d:cf:54:
cb:c7:71:c5:05:41:44:d5:1d:c0:f0:b5:27:f2:19:
40:05:80:d4:15:4c:99:5f:ae:f7:c3:43:82:7a:43:
36:68:9c:d8:e5:54:7e:97:2a:53:f1:ee:da:68:25:
25:21:7d:5b:25:f8:e8:32:ed:f7:b5:5d:3c:14:87:
0c:01:4b:e9:b1:75:16:04:64:00:48:ed:ea:3e:59:
70:3c:59:17:7c:32:eb:64:58:3d:49:55:e0:3c:15:
c6:2d:5e:74:00:b0:2e:bd:25:52:59:6b:ec:6f:8d:
4b:80:a3:5f:46:f2:1b:6b:93:83:e0:c7:77:24:68:
2e:af:87:33:91:34:38:34:48:8c:e8:38:2e:01:f7:
c0:f8:ee:4a:3d:34:e8:b6:30:15:cc:76:b5:3a:b7:
f6:3e:40:77:c0:95:51:b9:d0:98:94:ac:b8:80:30:
73:07:ce:8b:d0:a3:38:c8:b4:ff:03:83:47:33:e7:
3f:f2:3e:ea:6a:26:d6:78:4a:e1:a2:42:4e:84:b3:
79:8c:a5:c0:56:2a:8a:44:c7:2d:9d:a4:64:96:3d:
15:a5:a7:e1:64:5a:04:56:8a:93:77:a0:fb:4b:ca:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:3E:AD:A7:7B:75:3C:1C:DD:78:EF:34:8F:8D:31:58:37:C8:CB
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2a:e4:58:b4:b0:a6:8c:52:84:c9:77:5e:4f:81:df:be:fb:
9e:e7:7a:bc:cd:c7:b5:67:e6:6c:dc:16:33:c9:c0:be:a5:49:
3c:d9:cf:a6:3f:58:51:5e:5e:29:a4:31:97:32:e2:5b:f1:cf:
54:66:29:e4:2e:ee:9d:ed:b1:3d:5b:ce:ad:9e:b5:cd:5b:5d:
7a:38:31:8a:93:37:be:a1:ed:46:a3:3a:0e:3b:73:aa:7e:d9:
c0:3a:05:5b:32:ca:8d:3d:53:70:c0:52:d3:b3:02:47:3d:dd:
fa:2e:b6:56:c4:82:68:31:67:1a:b8:f0:7e:60:cc:20:f7:c2:
4a:ec:c7:95:db:e5:f7:ce:8c:f1:09:8e:36:b0:ac:3b:a1:de:
6f:13:78:7f:00:17:bb:f6:cc:f5:0d:c2:83:bb:f6:75:c8:13:
03:c6:da:6f:ba:e6:e5:63:95:10:3a:1d:05:fb:98:82:39:13:
6b:59:42:1f:d7:f5:c4:5f:c7:4e:2c:8c:7c:a1:51:76:46:cf:
6c:b1:3a:68:d2:75:e4:e1:47:16:e8:e6:ef:45:df:8c:8a:7e:
a0:61:d8:e7:d7:ee:2e:16:43:b8:06:e8:0f:8c:38:93:5a:b0:
20:42:12:0f:c7:bc:a0:3c:6a:b6:28:1f:0e:eb:87:06:ea:d0:
41:ac:ec:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RXLBWyAS9s0acG8M/f7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGMxOTY0ODQ3MDA5MWZjYTdjMGVkNzljZTlkZjZiZGFh
MGNkZmYwHhcNMjUwNjI4MTYwMTExWhcNMjUwNjI5MTYwMTExWjAzMTEwLwYDVQQD
EygwNzlhM2VhZGE3N2I3NTNjMWNkZDc4ZWYzNDhmOGQzMTU4MzdjOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHVRZlvmyf26xOz+psEEFZAJ1xDA
l/siEJqdz1TLx3HFBUFE1R3A8LUn8hlABYDUFUyZX673w0OCekM2aJzY5VR+lypT
8e7aaCUlIX1bJfjoMu33tV08FIcMAUvpsXUWBGQASO3qPllwPFkXfDLrZFg9SVXg
PBXGLV50ALAuvSVSWWvsb41LgKNfRvIba5OD4Md3JGgur4czkTQ4NEiM6DguAffA
+O5KPTTotjAVzHa1Orf2PkB3wJVRudCYlKy4gDBzB86L0KM4yLT/A4NHM+c/8j7q
aibWeErhokJOhLN5jKXAViqKRMctnaRklj0VpafhZFoEVoqTd6D7S8rJLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeaPq2ne3U8HN147zSPjTFYN8jLMB8GA1UdIwQY
MBaAFPCMGWSEcAkfynwO15zp32vaoM3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTIt
ZDFmZThjYjAxNDU2LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNTQ4NWUtMzgyNi00M2U4LThiZTItZDFmZThjYjAxNDU2
LzEvOEl3WlpJUndDUl9LZkE3WG5PbmZhOXFnemY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSrkWLSw
poxShMl3Xk+B3777nud6vM3HtWfmbNwWM8nAvqVJPNnPpj9YUV5eKaQxlzLiW/HP
VGYp5C7une2xPVvOrZ61zVtdejgxipM3vqHtRqM6Djtzqn7ZwDoFWzLKjT1TcMBS
07MCRz3d+i62VsSCaDFnGrjwfmDMIPfCSuzHldvl986M8QmONrCsO6HebxN4fwAX
u/bM9Q3Cg7v2dcgTA8bab7rm5WOVEDodBfuYgjkTa1lCH9f1xF/HTiyMfKFRdkbP
bLE6aNJ15OFHFujm70XfjIp+oGHY59fuLhZDuAboD4w4k1qwIEISD8e8oDxqtigf
DuuHBurQQazseQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:51 2025 by rpki-client